Microsoft IAM Consultant / Associate Manager (Active Directory)

Avanade; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Avanade Inc. in the United Kingdom seeks a Digital Identity Consultant to design and secure enterprise identity solutions across Microsoft Entra ID and Active Directory.

You will work with clients to modernise authentication, strengthen identity governance, and enhance AD resilience in medium to large enterprises.

This role requires strong IAM expertise, hands-on scripting, and collaboration in agile teams.

Qualifications

• Strong knowledge of Active Directory security, resilience, and legacy authentication protocols.
• Experience with Microsoft Entra ID, including SSO, Conditional Access, MFA and governance.
• Proficiency in modern authentication protocols (OAuth, SAML) and app integrations.
• Experience with Entra Application Provisioning (SCIM) and identity management.
• PowerShell automation and Azure-based identity tooling experience.

Responsibilities

• Design, secure, and optimise enterprise identity solutions across Entra ID and AD environments.
• Develop and implement modern authentication solutions (OAuth, SAML, token-based auth).
• Manage IAM lifecycle processes (provisioning, deprovisioning, JML, IGA).
• Troubleshoot IAM issues across AD, Entra ID, and authentication flows.
• Collaborate with cross-functional teams in an agile environment.

Skills

Active Directory security

Entra ID

OAuth

SAML

MFA

PowerShell

Tools

SCIM

Azure AD

Job description

As a Digital Identity Consultant (AD Security & Resilience), you will design, secure, and optimise enterprise identity solutions across Microsoft Entra ID and Active Directory environments. You will work directly with clients to modernise authentication, strengthen identity governance, and enhance AD resilience, contributing to robust and scalable digital identity architectures for medium to large enterprise organisations.

Key Responsibilities

• Develop and implement modern authentication solutions (OAuth, SAML, token-based authentication, claims transformations).
• Manage identities and authentication services using Microsoft Entra ID, including SSO, Conditional Access, MFA, PIM, and authentication methods.
• Enhance and secure Active Directory environments, including AD tiered models, GPOs, DNS, PKI/Certification Authority, and AD recovery.
• Manage IAM lifecycle processes (provisioning, deprovisioning, JML, IGA).
• Configure and maintain Entra ID Hybrid Sync and application provisioning (SCIM, custom attributes).
• Troubleshoot and resolve complex IAM issues across AD, Entra ID, and authentication flows.
• Lead or contribute to solution design and delivery for identity projects.
• Collaborate with cross-functional teams and stakeholders in an agile environment.
• Support privileged access management and secrets management initiatives.

Qualifications

• Strong knowledge of Active Directory security, resilience, and legacy authentication protocols (LDAP, Kerberos, NTLM).
• Experience with Microsoft Entra ID, including SSO, Conditional Access, MFA, identity governance, and domain services.
• Proficiency in modern authentication protocols (OAuth, SAML) and app integrations.
• Experience with Entra Application Provisioning (SCIM) and management of internal, external, and client identities.
• Skilled in PowerShell automation and Azure-based identity tools.
• Understanding of IAM lifecycle management, identity governance, and secure authentication principles.
• Experience leading or supporting identity solution design and implementation.
• Strong analytical, troubleshooting, and problem-solving abilities in IAM contexts.
• Effective communicator with experience in client-facing consulting and agile methodologies.
• Knowledge of privileged access management and secrets management is a plus.